IOC Report
jXtV6KO1A7.exe

C:\Program Files\Common Files\System\ado\en-US\Registry.exe:Zone.Identifier

ASCII text, with CRLF line terminators

dropped

C:\Program Files\Common Files\System\ado\en-US\ee2ad38f3d4382

ASCII text, with very long lines (932), with no line terminators

dropped

C:\Program Files\Windows Media Player\Media Renderer\9e8d7a4ca61bd9

ASCII text, with very long lines (760), with no line terminators

dropped

C:\Program Files\Windows Media Player\Media Renderer\RuntimeBroker.exe:Zone.Identifier

ASCII text, with CRLF line terminators

dropped

C:\Users\Public\Documents\23fc0d88861170

ASCII text, with very long lines (769), with no line terminators

dropped

C:\Users\Public\Documents\hYMmOtYRdhDhf.exe:Zone.Identifier

ASCII text, with CRLF line terminators

dropped

C:\Users\Public\Pictures\23fc0d88861170

ASCII text, with very long lines (334), with no line terminators

dropped

C:\Users\Public\Pictures\hYMmOtYRdhDhf.exe:Zone.Identifier

ASCII text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\RuntimeBroker.exe.log

CSV text

dropped

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\hYMmOtYRdhDhf.exe.log

ASCII text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\jXtV6KO1A7.exe.log

ASCII text, with CRLF line terminators

dropped

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache

data

dropped

C:\Users\user\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive

data

modified

C:\Users\user\AppData\Local\Temp\2CPXfojCPJ

ASCII text, with no line terminators

dropped

C:\Users\user\AppData\Local\Temp\RESAFD2.tmp

Intel 80386 COFF object file, not stripped, 3 sections, symbol offset=0x6ec, 10 symbols, created Sat Apr 20 04:37:10 2024, 1st section name ".debug$S"

dropped

C:\Users\user\AppData\Local\Temp\__PSScriptPolicyTest_0bekgdi1.4lq.ps1

ASCII text, with no line terminators

dropped